No Heartbleed in SAP HANA

Heartbleed is a vulnerability that affects hardware and software vendors and their customers. In the blog article referenced below, author Gert Schroeter stated that, “The vulnerability could potentially allow an unauthenticated, remote attacker to retrieve memory from a connected client or server, using an Open SSL library. Due to a missing bounds check in the handling of the Transport Layer Security (TLS) heartbeat extension, an attacker could exploit this vulnerability.” As a result, the disclosed parts could contain sensitive information.

SAP takes any threat to security seriously. Upon learning of the Heartbleed security issue, SAP started an evaluation process to determine which and how product lines could be affected. As a variety of applications require extensive review, the evaluation process is on-going.

Background: the SSL/TLS protocol is used to encrypt communication between server and client of SAP HANA. In order to encrypt the client-server connection for JDBC/ODBC access of SAP HANA, customers can choose to use an alternative, OpenSSL, as opposed to the CommonCryptoLib recommended by SAP.

Cornerstone has been providing superior business software products, related services and technical support to manufacturers and distributors for more than thirty years. Our team is Not “the new kids on the IT block.” If your goal is to streamline, automate and improve areas of a growing small or medium sized business such as: financial accounting, operations, customer relationship management, sales, inventory control and tracking, warehouse management, e-commerce, and more, you’ve found the right company. Cornerstone’s (English-speaking) programmers, trainers and consultants specialize in providing Manufacturing, Wholesale Distribution, and Online Retail clients with optimal business process configuration, integration and automation.

Questions About SAP HANA for SAP Business One? Connect With Cornerstone Consulting Today

With the lightning fast access to your data that SAP’s in memory database solution HANA can provide, in conjunction with the powerful “all-in-one” ERP system, SAP Business One, your enterprise can run better than ever previously imagined. How might we collaborate with you to improve your business and make it run better than thought possible? Let’s connect and start the conversation. Cornerstone Consulting can be reached at 813-321-1300.

Archives

Archives

For over 30 years, Cornerstone has helped product-oriented businesses implement and customize business ERP software that helps them better run and manage every aspect of their business; from sales, e-commerce, CRM, manufacturing, distribution, accounting, barcoding, and much more. We specialize in: